IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to traverse directories on the...

zetlyn/cve-ghsa vulnerability ghsa GHSA-fv32-xhg6-3q2m cve CVE-2026-6925 known 2026-09-23

https://github.com/advisories/GHSA-fv32-xhg6-3q2m

Properties

cvss5.3
receipt
Source
GitHub advisories
Said since
2026-09-28 11:44 UTC
Last answered
2026-10-04 18:15 UTC
Original
open at the source

This source has not kept a receipt for this claim yet. The next update that reads it will.

cweCWE-22
receipt
Source
GitHub advisories
Said since
2026-09-28 11:44 UTC
Last answered
2026-10-04 18:15 UTC
Original
open at the source

This source has not kept a receipt for this claim yet. The next update that reads it will.

severitymedium
receipt
Source
GitHub advisories
Said since
2026-09-28 11:44 UTC
Last answered
2026-10-04 18:15 UTC
Original
open at the source

This source has not kept a receipt for this claim yet. The next update that reads it will.

Text

IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to traverse directories on the... IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences ( /.. /) to view arbitrary files on the system.